Alternatives and similar repositories for logstash-codec-cef

Users that are interested in logstash-codec-cef are comparing it to the libraries listed below

• hvandenb / splunk-elasticsearch
  A search command for Splunk which will allow you to search Elastic Search and display the results in the Splunk GUI
  ☆69Updated 8 years ago
• libresec / duo-log-grabber
  Grabs the administrator and authentication logs from the Duo Security API and sends CEF-formatted syslog.
  ☆28Updated 8 years ago
• splunk / docker-itmonitoring
  Get Started with Streaming your Docker Logs and Stats in Splunk!
  ☆68Updated 7 years ago
• doksu / splunk_auditd
  Splunk App for Linux Auditd
  ☆58Updated 4 years ago
• coccyx / gogen
  Highly configurable and scalable data generator for testing or demo data
  ☆2Updated last month
• tanium / pytan
  Python Wrapper for Tanium's SOAP API
  ☆44Updated 5 years ago
• cvandeplas / ELK-forensics
  ELK configuration files for Forensic Analysts and Incident Handlers (unmaintained)
  ☆179Updated 5 years ago
• elastic / ecs-mapper
  Translate an ECS mapping CSV to starter pipelines for Beats, Elasticsearch or Logstash
  ☆54Updated 3 years ago
• brunotm / elasticsplunk
  A Search command to explore Elasticsearch data within Splunk.
  ☆40Updated 6 years ago
• OktaSecurityLabs / sgt
  Osquery Mangement Server
  ☆114Updated 4 years ago
• zeek / zeek-docker
  Docker files for building Zeek.
  ☆86Updated last year
• carbonblack / cbc-syslog
  Syslog Connector for the Carbon Black Cloud
  ☆30Updated 8 months ago
• juliedavila / STIGMA
  Simple Python program to parse OpenSCAP result files and give results
  ☆52Updated last year
• outcoldman / docker-splunk-cluster
  How to run cluster of Splunk Enterprise in Docker. Examples.
  ☆33Updated 8 years ago
• consulthys / logstashbeat
  Simple Beat for Logstash (v5+) statistics
  ☆13Updated 8 years ago
• PaloAltoNetworks / minemeld-core
  Engine of MineMeld
  ☆140Updated 2 years ago
• logstash-plugins / logstash-codec-netflow
  ☆78Updated last year
• harvard-itsecurity / qradar-seculert-push
  Push "BAD" IPs/Networks into QRadar's "Remote Networks", tag them properly, and use them!
  ☆18Updated 11 years ago
• joelwking / Phantom-Cyber
  Apps for Splunk Phantom security automation | Cisco Meraki | Ansible Tower | F5 | A10
  ☆24Updated 5 years ago
• rocknsm / rock-dashboards
  Dashboards and loader for ROCK NSM dashboards
  ☆48Updated 2 years ago
• opendxl / opendxl-client-python
  OpenDXL Python Client
  ☆94Updated 4 months ago
• tuckner / f5-elk
  Logstash Configs and Kibana Dashboards for F5 LTM & ASM
  ☆18Updated 7 years ago
• xme / misp-docker
  Docker container for MISP
  ☆96Updated 6 years ago
• PaloAltoNetworks / minemeld-ansible
  Ansible playbook for installing MineMeld on Linux
  ☆48Updated 4 years ago
• doksu / selinux_policy_for_splunk
  SELinux Policy for Splunk
  ☆56Updated 5 years ago
• alanwill / ansible-splunk
  Ansible playbook for installing Splunk 6 on an AWS infrastruture
  ☆20Updated 9 years ago
• tanium / TaniumOsquery
  An integration between Tanium and Osquery
  ☆12Updated 7 years ago
• blacktop / docker-bro
  Bro IDS Dockerfile
  ☆129Updated 5 years ago
• voxpupuli / puppet-splunk
  Manage Splunk servers and forwarders using Puppet
  ☆43Updated last week
• zeek / bro-plugins
  (OBSOLETE) Plugins for Bro
  ☆53Updated 7 years ago